Hacker News new | ask | show | jobs
by mplewis 1946 days ago
If I clone this repo, I can take all the compute I want and crack your password brute force. How long is your password?

1Password has a secret pre shared key that a client must use along with your password to unlock the vault.

1 comments

You’d need 12 random generated words from a big dictionary or something like that as the password. Which puts more onus on memory.

The other problem is someone can cache the encrypted version forever then if they later discover what your password WAS then they are in!